Commenting package.js a bit to document what @lwille was referring to when he called it a hack

(so we can remember it in the future and remove the hacks when the Meteor package API matures)